From afcc3e3fe02034c536b4d24d340288c784ea840b Mon Sep 17 00:00:00 2001 From: Luke Hoersten Date: Fri, 31 Jul 2026 14:31:51 -0500 Subject: ergo: give nginx access to the unix socket nginx terminates tls on 6697 and proxies to the socket, created 0770 ergo:ergo. With the ergo group empty the workers got EACCES and every client saw a tls handshake then silence (bitten on web after the 26.04 reboot). --- ergo/tasks/main.yaml | 7 +++++++ 1 file changed, 7 insertions(+) (limited to 'ergo') diff --git a/ergo/tasks/main.yaml b/ergo/tasks/main.yaml index 72f0285..31281da 100644 --- a/ergo/tasks/main.yaml +++ b/ergo/tasks/main.yaml @@ -4,6 +4,13 @@ become: yes user: name="ergo" shell="/bin/false" system="yes" create_home="no" +# nginx terminates tls on 6697 and proxies to ergo's unix socket, created +# 0770 ergo:ergo; without this group the workers get EACCES and clients see +# tls handshake then silence. +- name: add the nginx user to the ergo group + become: yes + user: name="www-data" groups="ergo" append="yes" + - name: download ergo become: yes unarchive: -- cgit v1.2.3